<?
session_start();

require_once "connect_db.php";

if ($_GET['task'] == "login") {
    $user = addslashes($_POST['user']);
    $pass = md5($_POST['pass']);

    $query = "SELECT * FROM users WHERE username='$user' and password='$pass'";
    $rezultat = mysql_query($query) or die("SQL error: ".mysql_error()."<br />\n");

    if (mysql_num_rows($rezultat) > 0)
    {
    while($row = mysql_fetch_array($rezultat)) {
        $uid = $row['uid'];
        $_SESSION['user'] = $username;
        $_SESSION['uid'] = $uid;
    }
    }

    else
    echo 'Netačno korisničko ime ili šifra.';

}

?>